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REMARKS 

Claims 1-37 remain active in this application. 
Amendment of claims 1, 17 and 28 has been requested to 
emphasize novel aspects of the invention already 
explicitly recited therein and in an effort to avoid 
evident confusion on the part of the Examiner. Support 
for the amendments of the claims is found throughout 
the application, particularly in the profile taJble as 
illustrated in Figure 14 and the description thereof on 
pages 14, 19 - 20, 31, 36 and 42. Verbatim support and 
definition of the terms "access profile" and "security 
profile" are found at page 12, line 28 and page 13, 
lines 30 - 31, respectively. No new matter has been 
introduced into the application. 

Claims 1-37 have been rejected under 3 5 U.S.C. 
§112, first paragraph, as failing to comply with the 
written description requirement in regard to the 
amendatory language: "containing no reference to any 
user authorization". This ground of rejection is 
respectfully traversed as being substantively in error 
and as being moot in view of the amendments to claims 
1, 17 and 28, above. 

It is respectfully submitted that this ground of 
rejection is clearly in error since, as was pointed out 
in detail on pages 12 and 13 of the previous response, 
it is clear that the (access) profile table of Figure 
14 literally contains no reference to any user 
authorization and the content thereof as discussed in 
the passages of pages 14, 19 - 20 31, 36 and 42 noted 
in that response do not indicate any reference to user 
authorizations being contained therein. Therefore the 
application as originally filed and the written 
description thereof provide ample evidence that the 
inventor was in possession of the invention as claimed 
at the time the application was filed, contrary to the 
Examiner's assertion in the statement of this ground of 
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rejection. Nevertheless, independent claims 1, 17 and 
28 have again been amended in an effort to fully 
resolve this issue. The claims now clearly and 
positively recite the two-tiered organization of the 
invention for managing access authorizations in terms 
of access profiles which refer to resources and 
security profiles which refer to access profiles and 
provide for authentication of individual users to 
particular resources through the intermediate access 
profiles. This subject matter is well-supported 
throughout the written description and the drawings 
such as in Figure lA wherein the levels of the 
architecture of the invention are indicated by brackets 
12, 14 and 16. 

Accordingly, it is respectfully submitted that 
this ground of rejection is clearly in error as to the 
claims as re j ected and clearly untenable as to the 
claims amended as requested above. Therefore, 
reconsideration and withdrawal of this ground of 
rejection are respectfully requested. 

Claims 1-37 have also been rejected under 35 
U.S.C. §102 as being anticipated by Ahlberg et al . 
This ground of rejection is also respectfully traversed 
for the reasons of record and the further reasons set 
out below. It is also respectfully submitted that the 
Examiner has not made a prima facie demonstration of 
anticipation of any claim based on Ahlberg et al . for 
the simple reason that the Examiner has again failed to 
address the amendatory recitation upon which the above 
rejection under 35 U.S.C. §112 was based. 

The invention, as claimed, has been described 
above and in previous responses. Basically the 
invention provides for simplified management of access 
authorizations and user authentications by providing 
separate and distinct security profiles and access 
profiles wherein the security profiles authenticate 
users to the resources through references to the 



FI 9-99-130 ( 00 7 504 15AA) 

13 



PATENT APPLICATION 



resources in the access profiles with which respective 
users are associated by the security profiles. 

In contrast to the invention, as claimed, Ahlberg 
et al . is directed to order entry for Internet 
accessible resources which may be made available as an 
arbitrary suite of resources. It is not clear that 
Ahlberg et al . teaches (or suggests) a list of such 
resources or a list of users but does not appear to 
teach (or suggest) editing of either, as claimed in 
claims 1 and 28. Also, while Ahlberg et al . refers to 
a user, customer or security ''profile", there is 
little, if any, indication of what it contains beyond 
the information required in the dialog screen of Figure 
2 0 and none of the references to such a profile appear 
to teach or suggest use or function of the profile to 
group particular resources. In fact, these terms 
appear to be used synonymously in Ahlberg et al . , 
particularly since only the term "security profile 
appears to be defined and while Ahlberg et al . may 
teach the grouping of different resources into a suite 
and provide access to all of them with a single user 
authentication, Ahlberg et al . does not provide 
separate security profiles and access profiles and 
explicitly discloses at column 13, line 65 to column 
14, line 20, that the security profile of Ahlberg et 
al . manages both the user authentication and the access 
to individual resources. Therefore, the relevance of 
Ahlberg et al . to the present invention is limited to 
the aspect of grouping of resources into a suite but 
has nothing to do with providing a solution to the 
problem of system administration complexity for large 
systems with many users where users and/or resources 
may be added, deleted or substituted with substantial 
frequency, particularly in regard to duplicate 
authorizations and different access levels for 
particular users or providing many "suites" of selected 
resources for different categories of users. The 
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solution to this problem is supported by the use of 
both security and access profiles so that changes may 
be implemented by a simple editing of one to a maximum 
of three lists; basically separating the functions of 
grouping of resources using the access profiles and the 
accessing of resources in accordance with the security 
profiles through the access profiles. Ahlberg et al . , 
by accessing resources in a suite directly from the 
security profiles does not teach (or suggest) the 
simplification of administration possible using 
distinct security and access profiles and is not 
evidently concerned with the complexity which may ensue 
when many different groups of resources must be made 
selectively available to a large number of users or 
which may frequently change. In contrast to the 
decoupling of the grouping of resources and user 
authentications the resources of the suite of resources 
of Ahlberg et al . are clearly coupled by the nature of 
the security profiles thereof. It is respectfully 
submitted that the recitations which support the 
decoupling of functions provided in accordance with the 
present invention and other meritorious effects 
provided by the two-tiered architecture of the 
invention (e.g. the last paragraph of claim 1) have 
been recited in the claims at least since the 
amendment filed December 12, 2003, and have not been 
the subject of any criticism by the Examiner while the 
Examiner has improperly rejected the claims due to 
amendatory language which was intended to emphasize 
such subject matter. 

Therefore, it is clear that the Examiner has not 
made a prima facie demonstration of anticipation of the 
subject matter of any claim in the application, as 
rejected or amended as requested. The Examiner has 
clearly given no weight or consideration to the 
previous amendatory language based on the re j ection 
under 35 U.S.C. §112 which, as pointed out above, is 
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clearly improper and improperly used to buttress the 
rejection based on Ahlgren et al . Accordingly, 
reconsideration and withdrawal of this ground of 
rejection are respectfully requested. 

It is also respectfully submitted that the entry 
of the above -requested amendments is clearly in order. 
It is axiomatic that an official action should not be 
made final when it does not prima facie demonstrate the 
propriety of all grounds of rejection contained therein 
and the finality of the present action is thus clearly 
premature. In any case, the requested amendments 
respond directly to criticisms raised by the Examiner 
and clearly do not raise any new issue while placing 
the application in condition for allowance or, in the 
alternative, in better form for Appeal by materially 
reducing and simplifying issues. Accordingly entry of 
the above-requested amendments is respectfully 
requested . 

A sincere effort has been made to resolve all 
issues raised by the present office action. Should any 
issue be seen to remain upon the above -requested 
reconsideration and consideration of the above remarks, 
it is respectfully requested that the Examiner contact 
the undersigned by telephone at the number given below 
in order to expeditiously resolve the same. 

Since all rejections, objections and requirements 
contained in the outstanding official action have been 
fully answered and shown to be in error and/or 
inapplicable to the present claims, it is respectfully 
submitted that reconsideration is now in order under 
the provisions of 37 C.F.R. §1.111 (b) and such 
reconsideration is respectfully requested. Upon 
reconsideration, it is also respectfully submitted that 
this application is in condition for allowance and such 
action is therefore respectfully requested. 

If an extension of time is required for this 
response to be considered as being timely filed, a 
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conditional petition is hereby made for such extension 
of time. Please charge any deficiencies in fees and 
credit any overpayment of fees to Deposit Account No. 
09-0458 of International Business Machines Corporation 
(E Fishkill) . 



Respectfully submitted. 




Marshall M. Curtis 
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